x86/sev: Check IOBM for IOIO exceptions from user-space
stable inclusion from stable-v5.10.199 commit 5bb9ba7dafbe18e027e335f74372ca65f07f7edd category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8BCTB CVE: CVE-2023-46813 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=5bb9ba7dafbe18e027e335f74372ca65f07f7edd -------------------------------- Upstream commit: b9cb9c45 Check the IO permission bitmap (if present) before emulating IOIO #VC exceptions for user-space. These permissions are checked by hardware already before the #VC is raised, but due to the VC-handler decoding race it needs to be checked again in software. Fixes: 25189d08 ("x86/sev-es: Add support for handling IOIO exceptions") Reported-by:Tom Dohrmann <erbse.13@gmx.de> Signed-off-by:
Joerg Roedel <jroedel@suse.de> Signed-off-by:
Borislav Petkov (AMD) <bp@alien8.de> Tested-by:
Tom Dohrmann <erbse.13@gmx.de> Cc: <stable@kernel.org> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by:
Yu Liao <liaoyu15@huawei.com> (cherry picked from commit 8f996743)
Loading
Please sign in to comment